Compliance documents · Built for POPIA
Know which compliance documents you need, what's missing, and prove they're approved.
Pick a framework like POPIA and get a checklist of the documents it requires. AI checks each policy clause by clause and cites its sources, your team approves every change, and you hand auditors a gap report.
Two-factor sign-in for everyone · Data hosted in the EU · Set up for you by Bluetrino consultants
Frameworks / POPIA
Example data
Protection of Personal Information Act
- Privacy policyDone
- PAIA manualDone
- Information security policyIn progress
- Security breach response procedure
- Cross-border transfer policyDoesn't apply
The policy doesn't say how a security compromise is reported to the Information Regulator and the people affected.
The problem
The scramble starts when someone asks for proof
Most small businesses don't know which documents they need. The ones they have sit in folders, out of date and never formally approved, until a regulator, auditor, bank or enterprise customer asks.
“What do we actually need?”
Laws like POPIA are long and written for lawyers. Turning them into a list of documents is hard.
“Is our policy good enough?”
Checking a policy clause by clause against the law is slow, expensive consultant work.
“Which version is current?”
Word files in email threads leave no record of who changed what, or who approved it.
“Can you prove it?”
Customers and partners send due-diligence questionnaires and expect evidence fast.
Features
Built to stand up to an auditor
AI that cites. A person who decides.
Every finding points to the clause in your policy and the section of the law, so you can check the reasoning. Suggested wording is applied only when someone on your team chooses to.
- v4Approved by the Information Officer2026-10-14 09:12 · signed PDFCurrent
- v4Sent for review by the Compliance Officer2026-10-11 16:40 · 3 changes
- v3Approved by the Managing Director2026-03-02 11:05 · signed PDF
An audit trail by default
Versions are append-only. Every approval records who, when and which version, and admins can require that nobody approves their own changes.
A gap report anyone can read
When an auditor, bank or partner asks, send one report per framework: which documents are missing, the status of every requirement and the findings still open.
| Requirement | Status |
|---|---|
| s18 Notification to data subject | Addressed |
| s19 Security safeguards | Addressed |
| s22 Notification of security compromises | Gap · 1 open finding |
| Security breach response procedure | Missing document |
Also in the workspace
Compliance assistant
Answers staff questions from your approved documents only, so people find the current rule fast.
Review queue
Every document has an owner and a review date. See what's due or overdue at a glance.
Consistency checks
Flags contradictions between documents, such as your privacy policy and terms of service.
Personnel register
Directors, key individuals and officers the regulator cares about, with their roles.
Public trust page
Add-onShare your approved public policies and framework status with customers.
Licences register
Add-onLicences and registrations with dates, owners and certificates.
Due-diligence questionnaires
Coming nextFill in customers' questionnaires from your approved documents.
Security and trust
Security you can point to
Your compliance documents are sensitive. Here's how we keep them that way.
Two-factor sign-in, always
Required for every user, with no opt-out.
Isolated data
Each organization's data is separated at the database level.
Hosted in the EU
Client data is hosted in Ireland.
No AI data retention
AI providers are instructed not to store your data.
Start a pilot
Let us set it up with you
Bluetrino consultants can set up your workspace, adopt your frameworks and run your first assessment with you. Prefer to explore yourself? Sign up and start now.
Or get started on your own →